This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json) Hash identifier: gZRHG+z5D/nKiBoUwJSDp9DzGG3jS6FWDQWOBEDgZB4= Subject key identifier: D7:C2:74:D6:82:B7:E6:BF:0D:55:4B:92:B6:FC:9C:75:85:5B:B2:C9 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019AEF3F89C9CBA74302A0646D12CB7811F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft Manifest number: 176A Signing time: Fri 05 Dec 2025 16:01:49 +0000 Manifest this update: Fri 05 Dec 2025 16:01:49 +0000 Manifest next update: Sat 06 Dec 2025 16:01:49 +0000 Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=) 2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: nIuSasGVIioIAr9kp0bH9FZ2PmlB913ohF0YBfa/KiQ=) 3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=) 4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:3f:89:c9:cb:a7:43:02:a0:64:6d:12:cb:78:11:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Dec 5 16:01:49 2025 GMT Not After : Dec 6 16:01:49 2025 GMT Subject: CN=d7c274d682b7e6bf0d554b92b6fc9c75855bb2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:40:5d:1d:28:1f:25:d1:1b:54:e9:35:df:b1: cf:ae:e4:7d:8c:32:0a:ce:db:4e:e6:f9:07:14:65: 18:1e:08:f1:41:c4:b9:1b:e6:9a:d0:f5:b5:ac:fd: 35:05:24:1a:93:72:6e:82:7d:1e:aa:95:12:88:88: 6e:4b:c3:47:a4:a0:5a:21:5d:e0:1e:c2:48:90:32: 99:65:67:35:e5:67:44:9f:93:a2:31:58:40:89:ac: 02:29:a4:f2:e8:35:0b:f7:da:c9:02:b7:49:c9:d1: 40:25:8f:99:67:d0:d4:cf:d5:49:e2:e5:aa:59:4f: c7:bd:a5:e8:3a:4e:3d:01:0e:b7:5a:82:34:17:18: 47:72:74:e9:99:7e:f3:39:2f:6f:22:bc:f1:c4:22: b0:3b:2e:23:f9:07:01:d2:5d:49:b3:03:d3:3a:0c: 65:31:59:d4:f7:5e:a1:a7:99:24:e4:8d:38:e3:36: da:fa:a0:8c:ee:39:fb:ab:96:ab:7d:20:af:08:7e: 42:7e:1e:fa:e7:b0:6d:37:fe:ce:5b:ed:08:8b:b1: 71:7d:c6:c4:2b:7e:39:e8:86:ff:16:80:dc:81:b3: 5a:bc:c1:bf:a9:a7:3b:b9:e4:42:b5:f2:4c:e9:da: 81:a8:69:de:39:3b:16:29:cc:63:c2:68:13:be:50: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:74:D6:82:B7:E6:BF:0D:55:4B:92:B6:FC:9C:75:85:5B:B2:C9 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cd:57:f2:47:64:b5:82:5f:b1:30:ba:c7:32:8b:67:8d:6d: dc:7e:af:ea:b6:ca:08:dc:e7:0c:24:df:ac:47:20:bc:5e:97: 4a:ae:60:50:f9:da:18:f9:da:de:f2:c0:e4:41:84:82:6f:f6: e5:60:38:4d:f3:11:9b:81:4d:66:43:bc:5d:0f:eb:a5:fe:59: a8:bc:a2:05:63:cb:fa:f0:77:04:fb:a1:0d:8f:de:38:ac:47: 04:f6:31:8d:58:90:23:62:23:7e:42:4f:c3:b0:6f:0d:60:c6: c9:1b:19:c4:81:2b:8c:17:78:6f:17:7b:3a:bc:ae:7c:e4:bb: 1b:9e:74:ce:98:9a:d8:07:1a:90:08:ff:eb:0d:e3:f7:63:44: 40:d7:d9:31:02:e9:0c:54:20:8c:40:7e:96:c5:aa:54:aa:4a: 0d:00:f8:45:cb:45:3e:af:4c:89:46:a6:95:fd:b8:a3:f6:36: 0d:c4:65:2f:35:43:d1:61:c9:25:31:a1:b2:af:55:52:38:8f: cc:6b:1c:3b:e0:c2:62:d9:52:12:36:39:24:9a:4b:d6:7e:d4: da:c6:a6:81:07:f9:8c:9c:8c:39:04:99:c6:fe:d7:ab:88:82: 0d:5f:4d:2e:69:4f:06:50:dd:b5:49:b0:da:6c:32:1c:dc:36: fa:04:d3:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvP4nJy6dDAqBkbRLLeBH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjUxMjA1MTYwMTQ5WhcNMjUxMjA2MTYwMTQ5WjAzMTEwLwYDVQQD EyhkN2MyNzRkNjgyYjdlNmJmMGQ1NTRiOTJiNmZjOWM3NTg1NWJiMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0BdHSgfJdEbVOk137HPruR9jDIK zttO5vkHFGUYHgjxQcS5G+aa0PW1rP01BSQak3Jugn0eqpUSiIhuS8NHpKBaIV3g HsJIkDKZZWc15WdEn5OiMVhAiawCKaTy6DUL99rJArdJydFAJY+ZZ9DUz9VJ4uWq WU/HvaXoOk49AQ63WoI0FxhHcnTpmX7zOS9vIrzxxCKwOy4j+QcB0l1JswPTOgxl MVnU916hp5kk5I044zba+qCM7jn7q5arfSCvCH5Cfh7657BtN/7OW+0Ii7FxfcbE K3456Ib/FoDcgbNavMG/qac7ueRCtfJM6dqBqGneOTsWKcxjwmgTvlAAHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfCdNaCt+a/DVVLkrb8nHWFW7LJMB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq81X8kdk tYJfsTC6xzKLZ41t3H6v6rbKCNznDCTfrEcgvF6XSq5gUPnaGPna3vLA5EGEgm/2 5WA4TfMRm4FNZkO8XQ/rpf5ZqLyiBWPL+vB3BPuhDY/eOKxHBPYxjViQI2IjfkJP w7BvDWDGyRsZxIErjBd4bxd7OryufOS7G550zpia2AcakAj/6w3j92NEQNfZMQLp DFQgjEB+lsWqVKpKDQD4RctFPq9MiUamlf24o/Y2DcRlLzVD0WHJJTGhsq9VUjiP zGscO+DCYtlSEjY5JJpL1n7U2samgQf5jJyMOQSZxv7Xq4iCDV9NLmlPBlDdtUmw 2mwyHNw2+gTTcQ== -----END CERTIFICATE-----Generated at Fri Dec 5 23:03:59 2025 by rpki-client